Description Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions mozilla firefox <= 3.6.22
3.6
3.6.2
3.6.3
3.6.4
3.6.6
3.6.7
3.6.8
3.6.9
3.6.10
3.6.11
3.6.12
3.6.13
3.6.14
3.6.15
3.6.16
3.6.17
3.6.18
3.6.19
3.6.20
3.6.21
4.0
4.0 beta1
4.0 beta10
4.0 beta11
4.0 beta12
4.0 beta2
4.0 beta3
4.0 beta4
4.0 beta5
4.0 beta6
4.0 beta7
4.0 beta8
4.0 beta9
4.0.1
5.0
6.0
Viewing 5 of 37 versions. View all CPE cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.20:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.6.21:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:* Remediation No remediation found in references. mozilla thunderbird <= 6.0.2
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.7.1
0.7.2
0.7.3
0.8
0.9
1.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.5 beta
1.0.6
1.0.7
1.0.8
1.5
1.5 beta2
1.5.0.1
1.5.0.2
1.5.0.3
1.5.0.4
1.5.0.5
1.5.0.6
1.5.0.7
1.5.0.8
1.5.0.9
1.5.0.10
1.5.0.11
1.5.0.12
1.5.0.13
1.5.0.14
1.5.1
1.5.2
1.7.1
1.7.3
2.0
2.0.0.0
2.0.0.1
2.0.0.2
2.0.0.3
2.0.0.4
2.0.0.5
2.0.0.6
2.0.0.7
2.0.0.8
2.0.0.9
2.0.0.11
2.0.0.12
2.0.0.13
2.0.0.14
2.0.0.15
2.0.0.16
2.0.0.17
2.0.0.18
2.0.0.19
2.0.0.20
2.0.0.21
2.0.0.22
2.0.0.23
2.0_.4
2.0_.5
2.0_.6
2.0_.9
2.0_.12
2.0_.13
2.0_.14
2.0_8
3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.0.9
3.0.10
3.0.11
3.1
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.1.10
3.1.11
5.0
Viewing 5 of 100 versions. View all CPE cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.1.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:* Remediation No remediation found in references. mozilla seamonkey <= 2.3.3
1.0
1.0 alpha
1.0 beta
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.99
1.1
1.1 alpha
1.1 beta
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.5 1.1.10
1.1.6
1.1.7
1.1.8
1.1.9
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.5.0.8
1.5.0.9
1.5.0.10
2.0
2.0 alpha_1
2.0 alpha_2
2.0 alpha_3
2.0 beta_1
2.0 beta_2
2.0 rc1
2.0 rc2
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0a1
2.0a1pre
2.1 alpha1
2.1 alpha2
2.1 alpha3
Viewing 5 of 67 versions. View all CPE cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:* Remediation No remediation found in references.
Change History 6 change records found show changes